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Background of the Invention 

Field of the Invention 

The invention relates to fault tolerant computer systems. More specifically, the 
invention is directed to a system for providing remote access and control of server 

15 environmental management. 

Description of the Related Technology 

As enterprise-class servers become more powerful and more capable, they are 
also becoming increasingly sophisticated and complex. For many companies, these 
changes lead to concerns over server reliability and manageability, particularly in light 

20 of the increasingly critical role of server-based applications. While in the past many 

systems administrators were comfortable with all of the various components that made 
up a standards-based network server, today's generation of servers can appear as an 
incomprehensible, unmanageable black box. Without visibility into the underlying 
behavior of the system, the administrator must "fly blind." Too often the only 

25 indicators the network manager has on the relative health of a particular server is 

whether or not it is running. 

It is well-acknowledged that there is a lack of reliability and availability of 
most standards-based servers. Server downtime, resulting either fi-om hardware or 
software faults or fi-om regular maintenance, continues to be a significant problem. 

30 By one estimate, the cost of downtime in mission critical environments has risen to 

an annual total of $4.0 bilUon for U.S. businesses, with the average downtime event 
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resulting in a $140 thousand loss in the retail industry and a $450 thousand loss in the 
securities industry. It has been reported that companies lose as much as $250 
thousand in employee productivity for every 1% of computer downtime. With 
emerging Internet, intranet and collaborative applications taking on more essential 
5 business roles every day, the cost of network server downtime will continue to spiral 

upward. 

While hardware fault tolerance is an important element of an overall high 
availability architecture, it is only one piece of the puzzle. Studies show that a 
significant percentage of network server downtime is caused by transient faults in the 

10 I/O subsystem. These faults may be due, for example, to the device driver, the 
adapter card firmware, or hardware which does not properly handle concurrent errors, 
and often causes servers to crash or hang. The result is hours of downtime per failure, 
while a system administrator discovers the failure takes some action, and manually 
reboots the server. In many cases, data volumes on hard disk drives become corrupt 

15 and must be repaired when the volume is mounted. A dismount-and-mount cycle may 
result from the lack of "hot pluggability" in current standards-based servers. 
Diagnosing intermittent errors can be a frustrating and time-consuming process. For 
a system to deliver consistently high availability, it must be resilient to these types of 
faults. Accurate and available information about such faults is central to diagnosing 

20 the underlying problems and taking corrective action. 

Modem fault tolerant systems have the functionality to provide the ambient 
temperature of a storage device enclosure and the operational status of other 
components such as the cooling fans and power supply. However, a limitation of 
these server systems is that they do not contain self-managing processes to correct 

25 malfunctions. Also, if a malfunction occurs in a typical server, it relies on the 

operating system software to report, record and manage recovery of the fault. 
However, many types of faults will prevent such software from carrying out these 
tasks. For example, a disk drive failure can prevent recording of the fault in a log file 
on that disk drive. If the system error caused the system to power down, then the 

30 system administrator would never know the source of the error. 
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Traditional systems are lacking in detail and sophistication when notifying 
system administrators of system malfunctions. System administrators are in need of 
a graphical user interface for monitoring the health of a network of servers. 
Administrators need a simple point-and-click interface to evaluate the health of each 
5 server in the network. In addition, existing fault tolerant servers rely upon operating 

system maintained logs for error recording. These systems are not capable of 
maintaining information when the operating system is inoperable due to a system 
malfunction. Existing systems do not have a system log for maintaining information 
when the main computational processors are inoperable. 

10 Another limitation of the typical fault tolerant system is that the control logic 

for the diagnostic system is associated with a particular processor. Thus, if the 
environmental control processor malfunctioned, then all diagnostic activity on the 
computer would cease. In traditional systems, if a controller dedicated to the fan 
system failed, then all fan activity could cease resulting in overheating and ultimate 

15 failure of the server. What is desired is a way to obtain diagnostic information when 
the server OS is not operational or even when main power to the server is down. 

Existing fault tolerant systems also lack the power to remotely control a 
particular server, such as powering up and down, resetting, retrieving or updating 
system status, displaying flight recorder and so forth. Such control of the server is 

20 desired even when the server power is down. For example, if the operating system 

on the remote machine failed, then a system administrator would have to physically 
go to the remote machine to re-boot the malfunctioning machine before any system 
information could be obtained or diagnostics could be started. 

Therefore, a need exists for improvements in server management which will 

25 result in greater reUability and dependability of operation. Server users are in need 

of a management system by which the users can accurately gauge the health of their 
system. Users need a high availability system that must not only be resilient to 
faults, but must allow for maintenance, modification, and growth— without downtime. 
System users must be able to replace failed components, and add new functionality, 

30 such as new network interfaces, disk interface cards and storage, without impacting 

existing users. As system demands grow, organizations must frequently expand, or 


scale, their computing infrastracture, adding new processing power, memory, storage 
and I/O capacity. With demand for 24-hoiir access to critical, server-based 
information resources, planned system downtime for system service or expansion has 
become xmacceptable. 

5 

Summary of the Invention 
Embodiments of the inventive remote access system provides system 
administrators With new levels of client/server system availability and management 
It gives system administrators and network managers a comprehensive view into the 
10 underlying health of the server-in real time, whether on-site or off-site. In the event 
of a failure, the invention enables the administrator to leam why the system failed, 
why the system was unable to boot, and to control certain functions of the server from 
a remote station. 

One embodiment of the present invention is a system for extemal management 

15 of a server environment, the system comprising a first computer having a plurality of 

components; a second computer connected to the first computer; a plurality of 
microcontrollers that monitor components of the first computer; a bus that 
interconnects the microcontrollers; and a remote interface circuit that interfaces the 
microcontrollers with the second computer thereby facilitating the extemal 

20 management of the first computer components. 

Another embodiment of the present invention is a system for extemal 
management of a computer environment, the system comprising a first computer 
having a plurality of components; a second computer connected to the first computer; 
means for monitoring components of the first computer; and means for interfacing the 

25 monitoring means with the second computer to facilitate the external management of 

the first computer components. 

Yet another embodiment of the present invention is a remote interface, 
comprising a microcontroller; a memory connected to the microcontroller; a first port 
capable of receiving and transmitting monitoring data; and a second port capable of 

30 receiving and transmitting monitoring data, wherein the second port includes 

connectivity to a microcontroller bus. 


Brief Description of the Drawings 
Figure 1 is a top level block diagram of microcontroller network components 
utilized by an embodiment of the present invention* 

Figure 2 is a block diagram of the server portion of the microcontroller 
5 network shown in Figure L 

Figure 3 is a block diagram of a remote interface board (RIB) that is part of 
the microcontroller network shown in Figures 1 and 2. 

Figure 4 is a diagram of serial protocol message formats utilized by the RIB 
shown in Figure 3, 

10 Figures 5a and 5b are a flowchart of a RIB microcontroller that is a part of the 

microcontroller network shown in Figures 1 and 2. 

Figure 6 is a diagram of a modem dialing and answering state machine defined 
in Figure 5a. 

15 Detailed Description of the Invention 

The following detailed description presents a description of certain specific 
embodiments of the present invention. In this des'^ption, reference is made to the 
drawings wherein like parts are designated with like numerals throughout. 

For convenience, the discussion of the invention is organized into the following 
20 principal sections: Introduction, Server System, Microcontroller Network, Remote 
Interface Board, Remote Interface Serial Protocol, and RIB Microcontroller Operation. 


1. INTRODUCTION 

25 The inventive computer server system and client computer includes a 

distributed hardware environment management system that is built as a small self- 
contained network of microcontrollers. Operating independently of the system 
processor and operating system software, embodiments of present invention uses 
separate processors for providing information and managing the hardware environment 

30 including fans, power suppUes and temperature. 
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Initialization, modification and retrieval of system conditions are performed 
through utilization of a remote interface by issuing commands to the environmental 
processors. The system conditions may include system log size, presence of faults in 
the system log, serial number for each of the environmental processors, serial nixmbers 

5 for each power supply of the system, system identification, system log count, power 
settings and presence, canister presence, temperature, BUS/CORE speed ratio, fan 
speeds, settings for fan faults, LCD display, Non-Maskable Interrupt (NMI) request 
bits, CPU fault summary, FRU status, JTAG enable bit, system log information, 
remote access password, over-temperature fault, CPU error bits, CPU presence, CPU 

10 thermal fault bits, and remote port modem. The aforementioned list of capabilities 
provided by the present environmental system is not all-inclusive. 

The server system and client computer provides mechanisms for the evaluation 
of the data that the system collects and methods for the diagnosis and repair of server 
problems in a manner that system errors can be effectively and efficiently managed. 

15 The time to evaluate and repair problems is minimized. The server system ensures 

that the system will not go down, so long as sufficient system resources are available 
to continue operation, but rather degrade gracefully until the faulty components can 
be replaced. 

20 11. SERVER SYSTEM 

Referring to Figure 1, a server system 100 with a remote client computer will 
be described. In a one embodiment, the server system hardware environment 100 may 
be built around a self-contained network of microcontrollers, such as, for example, a 
remote interface microcontroller on the remote interface board or circuit 104, a system 

25 interface microcontroller 106 and a system recorder microcontroller 110. This 

distributed service processor network 102 may operate as a fully self-contained 
subsystem within the server system 100, continuously monitoring and managing the 
physical environment of the machine (e.g., temperature, voltages, fan status). The 
microcontroller network 102 continues to operate and provides a system administrator 

30 with critical system information, regardless of the operational status of the server 100. 
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Information collected and analyzed by the microcontroller network 102 can be 
presented to a system administrator using either SNMP-based system management 
software (not shown), or using microcontroller network Recovery Manager software 
130 through a local connection 121 or a dial-in connection 123. The system 
5 management software, which interfaces with the operating system (OS) 108 such as 

Microsoft Windows NT Version 4.0 or Novell Netware Version 4.11, for example, 
provides the ability to manage the specific characteristics of the server system, 
including Hot Plug Peripheral Component Interconnect (PCI), power and cooling 
status, as well as the ability to handle alerts associated with these features. 
10 The microcontroller network Recovery Manager software 130 allows the 

system administrator to query the status of the server system 100 through the 
microcontroller network 102, even when the server is down. Using the 
microcontroller network remote management capability, a system administrator can 

pi 

m use the Recovery Manager 130 to re-start a failed system through a modem connection 

'J:; 15 123. First, the administrator can remotely view the microcontroller network FUght 

tV Recorder, a feature that stores all system messages, status and error reports in a 

if; circular Non-Volatile Random Access Memory buffer (NVRAM) 112. Then, after 

^ determining the cause of the system problem, the administrator can use microcontroller 

M= network "fly by wire" capability to reset the system, as well as to power the system 

P i 20 off or on. "Fly by wire" denotes that no switch, indicator or other control is directly 

connected to the function it monitors or controls, but instead, all the control and 
xi monitoring connections are made by the microcontroller network 102. 

The remote interface board (RIB) 104 interfaces the server system 100 to an 
external client computer. The RIB 104 may be internal or external to an enclosure of 
25 the server 100. Furthermore, the RIB may be incorporated onto another circuit of the 

server, such as a system board 150 (Figure 2) or a backplane 152 of the server. The 
RIB 104 connects to either a local client computer 122 at the same location as the 
server 100 or to a remote client computer 124 through an optional switch 120. The 
client computer 122/124 may in one embodiment run either Microsoft Windows 95 
30 or Windows NT Workstation version 4.0 operating system (OS) 132. 
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The client computer 122/124 could be another server, such as, for example, a 
backup server. The client computer 122/124 could also be a handheld computer such 
as, for example, a personal digital assistant (PDA). It is not necessary that Operating 
System software be running on the client computer 122/124. For example, the client 

5 computer 122/124 could be hard-wired for specific tasks, or could have special 

purpose embedded software. 

The processor and RAM requirements of the client computer 122/124 are such 
as necessary by the OS 132. The serial port of the client computer 122/124 may 
utilize a type 16550A Universal Asynchronous Receiver Transmitter (UART). The 

10 switch 120 facilitates either the local connection 121 or the modem connection 123 

at any one time, but allows both types of connections to be connected to the switch. 
In an another embodiment, either the local connection 121 or the modem connection 
123 is connected directly to the RIB 104. The local connection 121 utilizes a readily 
available nxill-modem serial cable to connect to the local client computer. The modem 

15 connection may utilize a Hayes-compatible server modem 126 and a Hayes-compatible 

client modem 128. In one embodiment, a model V.34X 33.6K data/fax modem 
available from Zoom is utilized as the client modem and the server modem. In 
another embodiment, a Sportster 33. 6K data/fax modem available from US Robotics 
is utilized as the chent modem. 

20 The steps of connecting the remote client computer 124 to the server 100 will 

now be briefly described. The remote interface 104 has a serial port connector 204 
(Figure 3) that directly connects with a counterpart serial port connector of the 
external server modem 126 without the use of a cable. If desired, a serial cable could 
be used to interconnect the remote interface 104 and the server modem 126. The 

25 cable end of an AC to DC power adapter (not shown, for example a 120 Volt AC to 

7.5 Volt DC, or a 220V, European or Japanese adapter) is then connected to the DC 
power connector J2 (220, Figure 3) of the remote interface, while the double-prong 
end is plugged into a 120 Volt AC wall outlet. One end of an RJ-45 parallel-wire 
data cable 103 is then plugged into an RJ-45 jack (226, Figure 3) on the remote 

30 interface 104, while the other end is plugged into a RJ-45 Recovery Manager jack on 

the server 100. The RJ-45 jack on the server then connects to the microcontroller 


network 102. The server modem 126 is then connected to a communications network 
127 using an appropriate connector. The communications network 127 may be a 
public switched telephone network, although other modem types and communication 
networks are envisioned. For example, if cable modems are used for the server 
5 modem 126 and client modem 128, the communications network can be a cable 

television network. As another example, satellite modulator/demodulators can be used 
in conjunction with a satellite network. 

In another embodiment, the server modem to client modem connection may be 
implemented by an Intemet connection utilizing the well known TCPAP protocol. 
10 Any of several Intemet access devices, such as modems or network interface cards, 
may be utiUzed. Thus, the communications network 127 may utilize either circuit or 
packet switching. 

At the remote client computer 124, a serial cable (25-pin D-shell) 129 is used 
to interconnect the client modem 128 and the client computer 124. The client modem 

15 128 is then connected to the communications network 127 using an appropriate 

connector. Each modem is then plugged into an appropriate power source for the 
modem, such as an AC outlet. At this time, the Recovery Manager software 130 is 
loaded into the chent computer 124, if not already present, and activated. 

The steps of coimecting the local client computer 122 to the server 100 are 

20 similar, but modems are not necessary. The main difference is that the serial port 

connector of the remote interface 104 connects to a serial port of the local chent 
computer 122 by the null-modem serial cable 121. 

III. MICROCONTROLLER NETWORK 
25 In one embodiment, the invention is implemented by a network of 

microcontrollers 102 (Figure 1). The microcontrollers may provide fimctionality for 
system control, diagnostic routines, self-maintenance control, and event logging 
processors. A fiarther description of the microcontrollers and microcontroller network 

is provided in U.S. Patent Apphcation No. , entitled "Diagnostic 

30 and Managing Distributed Processor System". 
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Referring to Figure 2, in one embodiment of the invention, the network of 
microcontrollers 102 includes ten processors. One of the purposes of the 
microcontroller network 102 is to transfer messages to the other components of the 
server system 100. The processors may include: a System Interface controller 106, 
5 a CPU A controller 166, a CPU B controller 168, a System Recorder 110, a Chassis 
controller 170, a Canister A controller 172, a Canister B controller 174, a Canister C 
controller 176, a Canister D controller 178 and a Remote Interface controller 200. 
The Remote Interface controller 200 is located on the RIB 104 (Figure 1) which is 
part of the server system 100, but may preferably be external to the server enclosure. 
10 The System Interface controller 106, the CPU A controller 166 and the CPU B 

controller 168 are located on thr system board 150 in the server 100. Also located on 
the system board are one or more central processing units (CPUs) or microprocessors 
164 and an Industry Standard Architecture (ISA) bus 162 that connects to the System 
ft I Interface Controller 106. Of course, other buses such as PCI, EISA and MicroChannel 

% 15 may be used. The CPU 164 may be any conventional general purpose single-chip or 

ll^ multi-chip microprocessor such as a Pentium®, Pentium® Pro or Pentixm® II processor 

available from Intel Corporation, a SPARC processor available from Sun 
'^"^ Microsystems, a MIPS® processor available from Silicon Graphics, Inc., a Power PC® 

processor available from Motorola, or an ALPHA® processor available from Digital 
p\ 20 Equipment Corporation. In addition, the CPU 164 may be any conventional special 

purpose microprocessor such as a digital signal processor or a graphics processor. 
\| The System Recorder 110 and Chassis controller 170, along with the NVRAM 

112 that connects to the System Recorder 110, may be located on the backplane 152 
of the server 100. The System Recorder 110 and Chassis controller 170 are typically 
25 the first microcontrollers to power up when server power is applied. The System 

Recorder 110, the Chassis controller 170 and the Remote Interface microcontroller 200 
are the three microcontrollers that have a bias 5 volt power supplied to them. If main 
server power is off, an independent power supply source for the bias 5 volt power is 
provided by the RIB 104 (Figure 1). The Canister controllers 172-178 are not 
30 considered to be part of the backplane 152 because they are located on separate cards 

and are removable. 
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Each of the microcontrollers has a unique system identifier or address. The 
addresses are as follows in Table 1 : 

TABLE 1 


5 Microcontroller Address 

System Interface controller 106 10 

CPU A controller 166 03 

CPU B controller 168 04 

System Recorder 110 01 

10 Chassis controller 170 02 

Canister A controller 172 20 

Canister B controller 174 21 

Canister C controller 176 22 

Canister D controller 178 23 

15 Remote Interface controller 200 11 


The microcontrollers may be Microchip Technologies, Inc. PIC processors in 
one embodiment, although other microcontrollers, such as an 8051 available from 
Intel, an 8751 available from Atmel, and a P80CL580 microprocessor available from 

20 Philips, could be utilized. The PIC16C74 (Chassis controller 170) and PIC16C65 (the 

other controllers) are members of the PIC16CXX family of CMOS, fully-static, 
EPROM-based 8-bit microcontrollers. The PIC controllers have 192 bytes of RAM, 
in addition to program memory, three timer/counters, two capture/compare/Pulse 
Width Modulation modules and two serial ports. The synchronous serial port is 

25 configured as a two-v^re Inter-Integrated Circuit (PC) bus in one embodiment of the 

invention. The PIC controllers use a Harvard architecture in which program and data 
are accessed from separate memories. This improves bandwidth over traditional von 
Neumann architecture processors where program and data are fetched from the same 
memory. Separating program and data memory further allows instructions to be sized 

30 differently than the 8-bit wide data word. Instruction opcodes are 14-bit vdde making 
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it possible to have all single word instructions. A 14-bit wide program memory access 
bus fetches a 14-bit instruction in a single cycle. 

In one embodiment of the invention, the microcontrollers communicate through 
an PC serial bus, also referred to as a microcontroller bus 160. The document "The 
PC Bus and How to Use It" (Philips Semiconductor, 1992) is hereby incorporated by 
reference. The PC bus is a bidirectional two-wire bus that may operate at a 400 kbps. 
However, other bus structures and protocols could be employed in connection with 
this invention. For example, Apple Computer ADB, Universal Serial Bus, IEEE-1394 
(Firewire), IEEE-488 (GPIB), RS-485, or Controller Area Network (CAN) could be 
utilized as the microcontroller bus. Control on the microcontroller bus is distributed. 
Each microcontroller can be a sender (a master) or a receiver (a slave) and each is 
interconnected by this bixs. A microcontroller directly controls its own resources, and 
indirectly controls resources of other microcontrollers on the bus. 

Here are some of the features of the PC-bus: 

• Two bus lines are utilized: a serial data line (SDA) and a serial clock line 
(SCL). 

Each device connected to the bus is software addressable by a unique address 
and simple master/slave relationships exist at all times; masters can operate as 
master-transmitters or as master-receivers. 

• The bus is a true multi-master bus including coUision detection and arbitration 
to prevent data corruption if two or more masters simultaneously initiate data 
transfer. 

Serial, 8-bit oriented, bidirectional data transfers can be made at up to 400 
kbit/second in the fast mode. 

Two wires, serial data (SDA) and serial clock (SCL), carry information 
between the devices connected to the f C bus. Each device is recognized by a unique 
address and can operate as either a transmitter or receiver, depending on the function 
of the device. For example, a memory device connected to the PC bus could both 
receive and transmit data. In addition to transmitters and receivers, devices can also 
be considered as masters or slaves when performing data transfers (see Table 2). A 
master is the device which initiates a data transfer on the bus and generates the clock 
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signals to permit that transfer. At that time, any device addressed is considered a 
slave. 


10 


15 


Term 

Transmitter 
Receiver 
Master 

Slave 

Multi-master 
Arbitration 


Synchronization 


TABLE 2 Definition of PC-bus terminology 

Description 

The device which sends the data to the bus 
The device which receives the data from the bus 
The device which initiates a transfer, generates clock 
signals and terminates a transfer 
The device addressed by a master 
More than one master can attempt to control the bus at 
the same time vnthout corrupting the message 
Procedure to ensure that, if more than one master 
simultaneously tries to control the bus, only one is 
allowed to do so and the message is not corrupted 
Procedure to synchronize the clock signal of two or more 
devices 


20 The I^C-bus is a multi-master bus. This means that more than one device 

capable of controlling the bus can be connected to it. As masters are usually 
microcontrollers, consider the case of a data transfer between two microcontrollers 
connected to the I^C-bus. This highUghts the master-slave and receiver-transmitter 
relationships to be found on the I^C-bus. It should be noted that these relationships 
25 are not permanent, but depend on the direction of data transfer at that time. The 

transfer of data would proceed as follows: 

1) Suppose microcontroller A wants to send information to microcontroller B: 
microcontroller A (master), addresses microcontroller B (slave); 
microcontroller A (master-transmitter), sends data to microcontroller B 
30 (slave-receiver); 

microcontroller A terminates the transfer. 
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2) If microcontroller A wants to receive information from microcontroller B: 
microcontroller A (master addresses microcontroller B (slave); 
microcontroller A (master-receiver) receives data from microcontroller 
B (slave-transmitter); 
5 - microcontroller A terminates the transfer. 

Even in this situation, the master (microcontroller A) generates the timing and 
terminates the transfer. 

The possibility of connecting more than one microcontroller to the PC-bus 
means that more than one master could try to initiate a data transfer at the same time. 
10 To avoid the chaos that might ensue from such an event, an arbitration procedure has 
been developed. This procedure relies on the v^red-AND connection of all f C 
interfaces to the I^C-bus. 

If two or more masters try to put information onto the bus, the first to produce 
a 'one' when the other produces a 'zero' will lose the arbitration. The clock signals 
15 during arbitration are a synchronized combination of the clocks generated by the 

masters using the wired-AND connection to the SCL line. 

Generation of clock signal on the PC-bus is the responsibility of master 
devices. Each master microcontroller generates its own clock signals when 
transferring data on the bus. 
20 The command, diagnostic, monitoring and history functions of the 

microcontroller network 102 are accessed using a global network memory model in 
one embodiment. That is, any function may be queried simply by generating a 
network "read" request targeted at the function's known global network address. In 
the same fashion, a function may be exercised simply by "writing" to its global 
25 network address. Any microcontroller may initiate read/v^ite activity by sending a 

message on the I^C bus to the microcontroller responsible for the function (which can 
be determined from the known global address of the function). The network memory 
model includes typing information as part of the memory addressing information. 

Using a network global memory model in one embodiment places relatively 
30 modest requirements for the PC message protocol. 
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► All messages conform to the f C message format including addressing and 
read/write indication. 

► All I^C messages use seven bit addressing. 

► Any controller can originate (be a Master) or respond (be a Slave), 

► All message transactions consist of "Combined format" messages. This is 
made up of two back-to-back I^C simple messages with a repeated START 
condition between (which does not allow for re-arbitrating the bus). The first 
message is a Write (Master to Slave) and the second message is a Read (Slave 
to Master), 

► Two types of transactions are used: Memory-Read and Memory- Write. 

► Sub-Addressing formats vary depending on data type being used. 

IV. REMOTE INTERFACE BOARD 

Referring to Figure 3, the remote interface board (RIB) 104, previously shown 
in Figure 1, will now be described. The RIB is an interface between the 
microcontroller network 102 (Figure 1) of the server system 100 and an extemal client 
computer 122/124, The server system status and commands are passed through the 
RS232 connector port 204 at the client side of the RIB to the microcontroller network 
102 on the server 100, controlled through the on-board PIC16C65 microcontroller 200, 
Signals in the microcontroller network 102 are transported by the microcontroller bus 
160 (Figure 2). In one embodiment, the microcontroller bus 160 utilizes the PC bus 
protocol, previously described. The signals on the microcontroller bus 160 are 
received from the server 100 by the RIB 104 on the RJ-45 cable 103 and are 
translated by the PIC16C65 microcontroller 200 into an eight signal RS232 protocol. 
These RS232 signals are passed through a RS232 line transceiver 202, such as a 
LTl 133A chip available from Linear Technology, with a baud rate capable of reaching 
the speed of 120 kbaud. A 25 pin D-Sub connector 204 connects to the other side of 
the line transceiver 202 and provides the point at which either the local client 
computer 122 or the server modem 126 makes a connection. 

The two wire microcontroller bus 160 is brought in from the server 100 and 
passed to the microcontroller 200 using the RJ-45 cable 103 and RJ-45 cormector 226. 
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A switch 228, such as a QS3126 switch available from Quick Logic, connects to the 
RJ-45 connector 226 and provides isolation for the data and clock bus signals internal 
and external to the RIB 104. If the RIB 104 and switch 228 have power, the switch 
228 feeds the bus signals through to a microcontroller bus extender 230. Otherwise, 

5 if the switch 228 does not have power, the microcontroller bus 160 is isolated from 

the RIB 104. The bus extender 230 connects between the switch 228 and the 
microcontroller 200. The bus extender 230 is a buffer providing drive capability for 
the clock and data signals. In one embodiment, the bus extender 230 is a 82B715 
chip available from Philips Semiconductor. Microcontroller 200 Port C, bit 3 is the 

10 clocking bit and Port C, bit 4 is the data line. 

Communication with the server modem 126 is based on the RS232 protocol. 
The microcontroller 200 generates the receive and the transmit signals, where the 
signal levels are transposed to the RS232 levels by the LT1133A line transceiver 202. 
There are three transmit signals, RTS, SOUT and DTR, which are from Port A, bits 

15 2, 3 and 4 of the microcontroller 200, whereas the five receive signals are from two 

ports, DCD, DSR from Port C, bits 1 and 0 and SIN, CTS and RI from Port A, bits 
5, 0 and 1. 

In one embodiment, the 25 pin RS232 pin connector 204 is used instead a 9 
pin connector, since this type of connector is more common. All the extra pins are 
20 not connected except the pins 1 and 7, where pin 1 is chassis ground and pin 7 is a 
signal ground. 

A static random access memory (SRAM) 208 connects to the microcontroller 
200. In one embodiment, the SRAM 208 is a 32k x 8 MT5LC2568 that is available 
from Micron Technology. The SRAM 208 is also available from other memory 

25 manufacturers. An external address register 206, such as an ABT374, available from 

Texas Instruments is used for latching the higher addressing bits (A8-A14) of the 
address for the SRAM 208 so as to expand the address to fifteen bits. The SRAM 
208 is used to store system status data, system log data from the NVRAM 112 (Figure 
1), and other message data for transfer to the external interface port 204 or to a 

30 microcontroller on the microcontroller bus 160 (Figure 2). 
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Port D of the microcontroller 200 is the address port. Port B is the data bus 
for the bi-directional data interconnect. Port E is for the SRAM enable, output tristate 
and write control signals. The microcontroller 200 operates at a frequency of 12 
MHz. 

5 An Erasable Programmable Read Only Memory (EPROM) 212 is used for 

storing board serial number identification information for the RIB 104. The serial 
number memory 212 is signal powered, retaining the charge into a capacitor sourced 
through the data line. In one embodiment, the serial number memory 212 stores eight 
sixteen-byte serial/revision numbers (for maintaining the rework/revision history) and 

10 is a DS2502 chip available from Dallas Semiconductor. The programming of memory 

212 is handled using a jumper applied through an external connector Jl 210. The 
serial number memory 212 connects to the microcontroller 200 at Port C, bit 6 and 
to the external connector Jl 210. 

The RIB 104 may be powered through a 7.5 Volt/800mA supply unit that plugs 

15 into a connector J2 220. In one embodiment, the supply unit is 120 Volt AC to DC 

wall adapter. Connector J2 220 feeds a LT1376 high frequency switching regulator 
222, available from Linear Technology, which regulates the power source. The 
regulated power output is used locally by the components on the RIB 104, and 
300 mA are sourced to the microcontroller network 102 through a 300 mA fuse 224 

20 and the RJ-45 connector 226. Thus, the output of the regulator 222 provides an 

alternative source for a bias-powered partition of the microcontroller network 102. 
The bias-powered partition includes the system recorder 110 (Figure 1), the NVRAM 
112 and the Chassis controller 170 (Figure 2) which are resident on the server 
backplane 152. 

25 

V. REMOTE INTERFACE SERIAL PROTOCOL 
The microcontroller network remote interface serial protocol communicates 
microcontroller network messages across a point-to-point serial link. This link is 
between the RIB controller 200 that is in conmiunication with the Recovery Manager 
30 130 at the remote client 122/124, This protocol encapsulates microcontroller network 
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messages in a transmission packet to provide error-free communication and link 
security. 

In one embodiment, the remote interface serial protocol uses the concept of 
byte stuffing. This means that certain byte values in the data stream have a particular 
5 meaning. If that byte value is transmitted by the underlying application as data, it 

must be transmitted as a two-byte sequence. 

The bytes that have a special meaning in this protocol are: 
SOM 306 Start of a message 

EOM 316 End of a message 

10 SUB The next byte in the data stream must be substituted 

before processing. 
INT 320 Event Interrupt 

Data 312 An entire microcontroller network message 

15 As stated above, if any of these byte values occur as data in a message, a two- 

byte sequence must be substituted for that byte. The sequence is a byte with the value 
of SUB, followed by a type with the value of the original byte, which is incremented 
by one. For example, if a SUB byte occurs in a message, it is transmitted as a SUB 
followed by a byte that has a value of SUB+1. 

20 Referring to Figure 4, the two types of messages 300 used by the remote 

interface serial protocol will be described. 

1. Requests 302, which are sent by remote management (client) computers 
122/124 (Figure 1) to the remote interface 104. 

2. Responses 304, which are retumed to the requester 122/124 by the 
25 remote interface 104. 


The fields of the messages are defined as follows: 

SOM 306 A special data byte value marking the start of a message. 

EOM 316 A special data byte value marking the end of a message. 

30 Seq.# 308 A one-byte sequence number, which is incremented on 

each request. It is stored in the response. 
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TYPE 310 One of the following types of requests: 

IDENTIFY Requests the remote interface to send back identification 

information about the system to which it is connected. 

It also resets the next expected sequence number. 

Security authorization does not need to be established 

before the request is issued. 
SECURE Establishes secure authorization on the serial link by 

checking password security data provided in the message 

with the microcontroller network password. 
UNSECURE Clears security authorization on the link and attempts to 

disconnect it. This requires security authorization to 

have been previously established. 
MESSAGE Passes the data portions of the message to the 

microcontroller network for execution. The response 

from the microcontroller network is sent back in the data 

portion of the response. This requires security 

authorization to have been previously established. 
POLL Queries the status of the remote interface. This request 

is generally used to determine if an event is pending in 

the remote interface. 
STATUS 318 One of the following response status values: 

OK Everything relating to communication with the remote 

interface is successful. 
OK_EVENT Everything relating to communication with the remote 

interface is successful. In addition, there is one or more 

events pending in the remote interface. 
SEQUENCE The sequence number of the request is neither the 

current sequence number or retransmission request, nor 

the next expected sequence number or new request. 

Sequence numbers may be reset by an IDENTIFY 

request. 
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CHECK The check byte in the request message is received 
incorrectly. 

FORMAT Something about the format of the message is incorrect. 

Most likely, the type field contains an invalid value. 
SECURE The message requires that security authorization be in 
effect, or, if the message has a TYPE value of SECURE, 
the security check failed. 
Check 314 Indicates a message integrity check byte. Currently the 

value is 256 minus the sum of previous bytes in the 
message. For example, adding all bytes in the message 
up to and including the check byte should produce a 
result of zero (0). 

INT 320 A special one-byte message sent by the remote interface 

when it detects the transition from no events pending to 
one or more events pending. This message can be used 
to trigger reading events from the remote interface. 
Events should be read until the retum status changes 
form OK_EVENT to OK. 

VL RIB MICROCONTROLLER OPERATION 
The remote interface is the bridge to link the microcontroller bus to the outside 
world via a RS232 serial port through which a client computer can be connected. A 
message from the remote client side via RS232 usually starts with the "Identify" 
command which identifies the system name. See the message format associated with 
Figure 4, above. The "Identify" command should be followed by the "Security" 
command with a password that is checked against the password stored in the NVRAM 
112 (Figure 1). If the passwords match, the remote RS232 link is put in "secure 
mode" and the remote interface 104 (Figure 1) will now pass any "message" 
commands on to the microcontroller network bus 160 (Figure 2). Before the remote 
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application program disconnects the link, it should send the "Unsecure" command to 
take the RS232 link out of "secure mode". 

Referring to Figures 5 a and 5b, embodiments of the RIB microcontroller 
process 400 will be described. The process 400 is implemented as a computer 

5 program, termed firmware, written in PIC assembly language. The assembled machine 

code is stored in the microcontroller EPROM where each instruction is fetched for 
execution by the processor. The EPROM provides 4K x 14 program memory space, 
all on-chip. Program execution is using the internal memory. Of course, any of a 
variety of general purpose and special purpose processors could be used and the 

10 programming of the process 400 could be in high level code such as C or Java. 

Beginning at an initialize PIC state 402, process 400 initializes the variables, 
stack pointer, and other structures of the RIB microcontroller 200 (Figure 3). Moving 
to state 404, a return point called "main" is identified in process 400. Proceeding to 
a decision state 406, process 400 determines if the RS232 port is transmitting data. 

15 If so, process 400 moves to state 408 to send a character (one byte) if there is data in 
the SRAM 208 to be sent out on the RS232 port 204. A process of receiving data via 
the RS232 port 204 is not shovra herein. Receiving data via the port 204 is initiated 
by the use of an interrupt. 

At the completion of state 408, or if decision state 406 evaluates to a false 

20 condition, process 400 proceeds to a Check Modem Status function 410 that is 

implemented as a modem dialing and answering state machine. Function 410 checks 
the status of the modem 126 for any possible activity. Function 410 will be further 
described in conjunction with Figure 6. Advancing to a decision state 412, process 
400 determines if any server event is pending. Event types include, for example, CPU 

25 status change, power status change, canister status change, fan status change, 

temperature, and operating system timeout. If an event is pending, process 400 
proceeds to state 414 and sends an event message to the client computer 122/124 via 
the RS232 port. If no event is pending, as determined at decision state 412, process 
400 continues at a decision state 416. At decision state 416, process 400 checks to 

30 see if a RS232 remote message has been received from the client computer 122/124. 

If not, process 400 moves back to the "main" loop 404, as described above. One 
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reason that a message has not been received yet is that the modem is not yet 
transmitting. 

If a message has been received, as determined at decision state 416, process 
moves to the appropriate state 420-426 to handle one of four command types: Identify, 
5 Secure, Unsecure, and Message, At state 420, process 400 performs the Identify 

command and identifies the system by responding v^ith the system name retrieved 
from the System Recorder memory 112 (Figure 1). 

At state 422, process 400 performs the Secure command and gets the password 
with the command and checks it against the password from the NVRAM 112 (Figure 

10 1). If the passwords match, the access right is granted (opens secure mode), 

otherwise, reject the intent. 

At state 424, process 400 performs the Unsecure command and releases the 
remote access right, i.e., closes secure mode. At the completion of states 420, 422 or 
424, process 400 proceeds through off-page connector E 430 to state 438 (Figure 5b). 

15 At state 426 on Figure 5b (through off-page connector D 418), process 400 

performs the Message command and gets remote message data from the RIB SRAM 
208 (Figure 3). Proceeding to a decision state 432, process 400 determines if this 
message command is for the remote interface 104, If it is, process 400 executes the 
internal remote interface function command, such as a Read Revision of the RIB 

20 command. If the message command is not for the remote interface, as determined by 

decision state 432, process 400 moves to state 436 and passes the message command 
to its destination (external to the remote interface) via the microcontroller bus. This 
facilitates communication with another microcontroller for a command to read or write 
information, for example. 

25 At the completion of states 420, 422, 424, 434 or 436, process 400 advances 

to state 438 and stores the response data for the command into the SRAM 208 (Figure 
3) to be sent back to the client computer 122/124. Moving to state 440, process 400 
transmit the first byte of data back on the RS232 port 204 to the client computer 
122/124. After the byte of data has been transmitted at state 440, process 400 moves 

30 back to the "main" loop 404 (on Figure 5a), as described above. 
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Referring to Figure 6, embodiments of the Check Modem Status function 410 
will now be described. Function 410 is implemented as a modem dialing and 
answering state machine. Several terms useful for understanding of the modem 
dialing and answering state machine are listed in Table 3 below. 


TABLE 3 

Modem Term Meaning 
CTS clear to send 

DCD data carrier detect 

DSR data set ready 

DTR data transfer ready 

RTS request to send 

EOS end of string 

Protocol indicates whether RS232 serial data uses the messaging 

protocol or whether the data is a string of bytes 

Ring modem is detecting an incoming ring signal from another 

modem 

Local a connection to a local client computer (no modem used) 

Modem Mode modem to modem connection 


Modem Already Set modem initialization string has already been sent and 

completed 

State machine 410 includes nine states, states 470-486. State 470 denotes that 
the modem is disconnected, DTR and RTS are clear and the protocol is clear. 
Protocol is clear indicates that no message protocol processing is to occur for bytes 
on the RS232 link (because it would affect transmitting and receiving of modem 
control string bytes). The state machine 410 remains at the Modem Disconnect state 
470 while CTS is clear OR there have been "n" dialing retries already OR there is no 
Ring OR DSR is clear. If DSR is set (active), the state machine 410 proceeds to a 
Local Modem state 486, wherein RTS and DTR are set. The state machine 410 
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remains at state 486 while DSR is set. Is DSR clears or if Local AND Modem Mode 
are both set, the state machine 410 retums to Modem Disconnect state 470, 

The state machine 410 proceeds to Modem Soft Reset state 472 if a Call Out 
condition OR a Setup condition is achieved. Call Out is achieved if Modem Mode 
5 is set AND Modem Already Set is set AND CTS is set AND there have not been "n" 

dialing retries aheady. Setup is achieved if Modem Mode is set AND Modem 
Already Set is clear AND CTS is set. At Modem Soft Reset state 472, DTR is set 
and RTS is set. The state machine 410 remains at state 472 while Send String Done 
is clear, i.e., the modem command string is still being sent to the modem. 

10 The state machine 410 proceeds to Modem Test state 474 when Send String 

Done is set. The state machine 410 remains at state 474 while Send String Done is 
clear. The state machine 410 proceeds to Modem Result Code state 476 when Send 
String Done is set. The state machine 410 remains at state 476 while Modem Result 
Status Done is clear, i.e., the results status of the modem test at state 474 is not yet 

15 available. 

The state machine 410 retums to Modem Discormect state 470 from state 476 
if Results Status OK is clear, i.e., the results status is not OK. However, if Results 
Status OK is set, i.e., the results status is correct, the state machine 410 proceeds to 
a Modem Setup state 478, wherein Modem Already Set is set. The state machine 410 

20 retums to Modem Disconnect state 470 from state 478 if there have been "n" dialing 

retries already. However, if there have not been "n" dialing retries already, the state 
machine 410 proceeds to a Modem Dialing state 480, wherein the modem is dialed. 

The state machine 410 remains at state 480 while the previous EOS has not 
been reached AND two seconds have not passed. The state machine 410 retums to 

25 Modem Disconnect state 470 from state 480 if Dial OK is clear, i.e., dialing the 
modem was not successful. However, if Dial OK is set, i.e., dialing the modem was 
successful, the state machine 410 proceeds to a Modem Answering state 482. Another 
path to the Modem Answering state 482 is from the Modem Disconnect state 470 
when a Ringing mode is achieved. Ringing mode is achieved if Modem Mode is set 

30 AND Modem Already Set is set AND CTS is set AND Ring is set. The state 

machine 410 remains at state 482 while DSR is clear OR DCD is clear. The state 


-25- 


machine 410 returns to Modem Disconnect State 470 from state 482 if DCD is clear 
and a timeout occurs, i.e., no DCD is set within a timeout period (nobody answers). 
The state machine 410 proceeds to Remote Modem state 484 when DSR is set AND 
DCD is set. The modem transfers message data while at this state. When DCD 
5 clears, the state machine 410 returns to Modem Disconnect state 470 from state 484 

or otherwise remains at state 484. 

While the above detailed description has shown, described, and pointed out the 
fundamental novel features of the invention as applied to various embodiments, it will 
be understood that various omissions and substitutions and changes in the form and 
10 details of the system illustrated may be made by those skilled in the art, without 

departing from the intent of the invention. 
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WHAT IS CLAIMED IS : 

L A system for external management of a computer environment, the system 
comprising: 

a first computer having a plurality of components; 
5 a second computer connected to the first computer; 

a plurality of microcontrollers that monitor components of the first 
computer; 

a bus that interconnects the microcontrollers; and 
a remote interface circuit that interfaces the microcontrollers with the 
10 second computer thereby facilitating the external management of the first 

computer components, 

2. The system defined in Claim 1, v^herein the remote interface circuit includes 
an external port for connection to the second computer. 

15 

3. The system defined in Claim 1, wherein the second computer is at the same 
location as the first computer. 

4. The system defined in Claim 1, wherein the second computer is at a location 
20 remote to the first computer. 

5. The system defined in Claim 4, additionally comprising a pair of modems, 
wherein a first modem connects to the first computer and a second modem connects 
to the second computer. 

25 

6. The system defined in Claim 5, wherein each modem fiirther connects to the 
public switched telephone network. 

7. The system defined in Claim 5, wherein each modem further connects to a 
30 cable network. 
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8. The system defined in Claim 1, wherein the remote interface circuit includes 
a remote interface microcontroller that connects via the bus to the microcontrollers. 

9. The system defined in Claim 1, wherein the remote interface circuit includes 
5 a memory for storing resuhs of monitoring the first computer components. 

10. The system defined in Claim 1, wherein the remote interface circuit includes 
a power source independent of the first computer. 

10 11. The system defined in Claim 10, wherein the independent power source 

includes an AC to DC adapter. 

12. The system defined in Claim 1, wherein the second computer is a handheld 
computer. 

15 

13. A system for external management of a computer environment, the system 
comprising: 

a first computer having a plurality of components; 
a second computer cormected to the first computer; 
20 means for monitoring components of the first computer; and 

means for interfacing the monitoring means with the second computer 
to facilitate the external management of the first computer components. 

A remote interface, comprising: 
a microcontroller; 

a memory connected to the microcontroller; 

a first port capable of receiving and transmitting monitoring data; and 
a second port capable of receiving and transmitting monitoring data, 
wherein the second port includes connectivity to a microcontroller bus. 
30 

15. The remote interface of Claim 14, wherein the microcontroller bus is PC. 


14. 

25 
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16. The remote interface of Claim 14, wherein the microcontroller bus is Controller 
Area Network. 

17. The remote interface of Claim 14, wherein the monitoring data is stored in the 
5 memory. 

18. The remote interface of Claim 14, wherein the first port receives a command 
from an external computer. 

10 19. The remote interface of Claim 18, wherein the command estabUshes security 

authorization. 

20. The remote interface of Claim 18, wherein the command requests data from 
the memory. 

15 

21. The remote interface of Claim 18, wherein the command sends data to the 
microcontroller bus. 
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SYSTEM ARCHITECTURE FOR REMOTE ACCESS AND 
CONTROL OF ENVIRONMENTAL MANAGEMENT 


Abstract of the Disclosure 

5 A fault tolerant system by which individual components of a server are 

monitored and controlled through independent, programmable microcontrollers 
interconnected through a microcontroller network. An external agent can control and 
monitor the microcontrollers by extending the interconnection network beyond the 
physical server. The extension to the interconnection network converts protocols 

10 between media, and directs the microcontrollers and the state managed by the 
microcontrollers. Intervention of the server operating system software is not required 
and is not utilized for the access and control operations. A remote interface board 
provides the interface between the microcontroller network and an external modem 
that communicates v^th a remote client computer. The remote interface board also 

15 provides for connection to a local client computer. 
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A ppendix A 

Incorporation by Reference of Commonly Owned Applications 

The following patent applicationSj commonly owned and filed on the same day 
as the present application are hereby incorporated herein in their entirety by reference 
thereto: 


Title 

"System Architecture for Remote 
Access and Control of Environmental 
10 Management" 

"Method of Remote Access and 
Control of Environmental 
Management" 

"System for Independent Powering of 
15 Diagnostic Processes on a Computer 

System" 

"Method of Independent Powering of 
Diagnostic Processes on a Computer 
System" 

20 "Diagnostic and Managing Distributed 

Processor System" 

"Method for Managing a Distributed 
Processor System" 

"System for Mapping Environmental 
25 Resources to Memory for Program 

Access" 

"Method for Mapping Environmental 
Resources to Memory for Program 
Access" 

30 "Hot Add of Devices Software 

Architecture" 

"Method for The Hot Add of Devices" 

"Hot Swap of Devices Software 
Architecture" 

35 "Method for The Hot Swap of 

Devices" 


Application No. Attorney Docket 

No. 

MNFRAME.002A1 


MNFRAME.002A2 

MNFRAME.002A3 

MNFRAME.002A4 

MNFRAME.005A1 
MNFRAME.005A2 
MNFRAME.005A3 

MNFRAME,005A4 

MNFRAME.006A1 

MNFRAME.006A2 
MNFRAME.006A3 

MNFRAME.006A4 
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Title 

"Method for the Hot Add of a Network 
Adapter on a System Including a 
Dynamically Loaded Adapter Driver" 

"Method for the Hot Add of a Mass 
5 Storage Adapter on a System Including 

a Statically Loaded Adapter Driver" 

"Method for the Hot Add of a Network 
Adapter on a System Including a 
Statically Loaded Adapter Driver" 

10 "Method for the Hot Add of a Mass 

Storage Adapter on a System Including 
a Dynamically Loaded Adapter Driver" 

"Method for the Hot Swap of a 
Network Adapter on a System 
15 Including a Dynamically Loaded 

Adapter Driver" 

"Method for the Hot Swap of a Mass 
Storage Adapter on a System Including 
a Statically Loaded Adapter Driver" 

20 "Method for the Hot Swap of a 

Network Adapter on a System 
Including a Statically Loaded Adapter 
Driver" 

"Method for the Hot Swap of a Mass 
25 Storage Adapter on a System Including 

a Dynamically Loaded Adapter Driver" 

"Method of Performing an Extensive 
Diagnostic Test in Conjunction with a 
BIOS Test Routine" 

30 "Apparatus for Performing an 

Extensive Diagnostic Test in 
Conjunction with a BIOS Test 
Routine" 

"Configuration Management Method 
35 for Hot Adding and Hot Replacing 

Devices" 


Application No. 


Attorney Docket 
No* 

MNFRAME.006A5 


MNFRAME.006A6 


MNFRAME.006A7 


MNFRAME.006A8 


MNFRAME.006A9 


MNFRAME.006A10 


MNFRAME.006A11 


MNFRAME,006A12 


MNFRAME.008A 


MNFRAME.009A 


MNFRAME.OlOA 
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Title 


"Configuration Management System 
for Hot Adding and Hot Replacing 
Devices" 

"Apparatus for Interfacing Buses" 

5 "Method for Interfacing Buses" 

"Computer Fan Speed Control Device" 

"Computer Fan Speed Control Method" 

"System for Powering Up and 
Powering Down a Server" 

10 "Method of Powering Up and 

Powering Down a Server" 

"System for Resetting a Server" 

"Method of Resetting a Server" 

"System for Displaying Flight 
15 Recorder" 

"Method of Displaying Flight 
Recorder" 

"Synchronous Communication 
Interface" 

20 "Synchronous Communication 

Emulation" 

"Software System Facilitating the 
Replacement or Insertion of Devices in 
a Computer System" 

25 "Method for Facilitating the 

Replacement or Insertion of Devices in 
a Computer System" 

"System Management Graphical User 
Interface" 

30 "Display of System Information" 

"Data Management System Supporting 
Hot Plug Operations on a Computer" 


Application No. 


Attorney Docket 
No. 

MNFRAME.OllA 


MNFRAME.012A 
MNFRAME.013A 
MNFRAME.016A 
MNFRAME,017A 
MNFRAME.018A 

MNFRAME,019A 

MNFRAME,020A 
MNFRAME.021A 
MNFRAME.022A 

MNFRAME.023A 

MNFRAME.024A 

MNFRAME.025A 

MNFRAME.026A 

MNFRAME.027A 

MNFRAME.028A 

MNFRAME,029A 
MNFRAME.030A 
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Title 

"Data Management Method Supporting 
Hot Plug Operations on a Computer" 

"Alert Configurator and Manager" 

"Managing Computer System Alerts" 

5 "Computer Fan Speed Control System" 

"Computer Fan Speed Control System 
Method" 

"Black Box Recorder for Information 
System Events" 

10 "Method of Recording Information 

System Events" 

"Method for Automatically Reporting a 
System Failure in a Server" 

"System for Automatically Reporting a 
15 System Failure in a Server" 

"Expansion of PCI Bus Loading 
Capacity" 

"Method for Expanding PCI Bus 
Loading Capacity" 

20 "System for Displaying System Status" 

"Method of Displaying System Status" 

"Fault Tolerant Computer System" 

"Method for Hot Swapping of Network 
Components" 

25 "A Method for Communicating a 

Software Generated Pulse Waveform 
Between Two Servers in a Network" 

"A System for Communicating a 
Software Generated Pulse Waveform 
30 Between Two Servers in a Network" 

"Method for Clustering Software 
Applications" 


Application No. 


Attorney Docket 
No. 

MNFRAME,031A 


MNFRAME.032A 
MNFRAME,033A 
MNFRAME^034A 
MNFRAME.035A 

MNFRAME.036A 

MNFRAME.037A 

MNFRAME.040A 

MNFRAME.041A 

MNFRAME.042A 

MNFRAME.043A 

MNFRAME.044A 
MNFRAME.045A 
MNFRAME.046A 
MNFRAME,047A 

MNFRAME.048A 
MNFRAME,049A 
MNFRAME.050A 
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Title 

"System for Clustering Software 
Applications" 

"Method for Automatically 
Configuring a Server after Hot Add of 
5 a Device" 

"System for Automatically Configuring 
a Server after Hot Add of a Device" 

"Method of Automatically Configuring 
and Formatting a Computer System 
10 and Installing Software" 

"System for Automatically Configuring 
and Formatting a Computer System 
and Installing Software" 

"Determining Slot Numbers in a 
15 Computer" 

"System for Detecting Errors in a 
Network" 

"Method of Detecting Errors in a 
Network" 

20 "System for Detecting Network Errors" 

"Method of Detecting Network Errors" 


Application No. Attorney Docket 

No. 

MNFRAME,051A 


MNFRAME,052A 

MNFRAME,053A 
MNFRAME.054A 

MNFRAME,055A 

MNFRAME.056A 

MNFRAME.058A 

MNFRAME.059A 

MNFRAME.060A 
MNFRAME.061A 


25 
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Provisional Patent Application 


6391-710: 

Title: REMOTE ACCESS AND CONTROL OF ENVIRONMENTAL MANAGEMENT 
SYSTEM 

Invs: Karl Johnson 
Tahir Sheik 

The following docijments are attached and form part of this disclosiire: 

1 . Maestro Recovery Manager Analysis - Problem Statement^ pp. 1-1 0. 

2. Remote Interface Board Specification, Revision 2 13-000072-01, June 21, 1996, pp. 
1-lL 

Multiple Node Service Processor Network 

A means is provided by which individual components of a system are monitored and 
controlled through a set of independent, programmable microcontrollers interconnected through a 
network. Further means are provided to allow access to the microcontrollers and the interconnecting 
network by software running on the host processor. 

Fly-by-wire 

A means is provided by which all indicators, push buttons and other physical control means 
are actuated via the multiple node service processor network. No indicators, push buttons or other 
physical control means are physically connected to the device which they control, but are connected 
to a microcontroller, which then actuates the control or provides the information being monitored. 

Self-Managing Intelligence 

A means is provided by which devices are managed by the microcontrollers in a multiple 
node service processor network by software running on one or more microcontrollers, 
communicating via the interconnecting network. Management of these devices is done entirely by 
the service processor network, v^thout action or intervention by system software or an external 
agent. 
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Flight Recorder 


A means is provided for recording system events in a non- volatile memory, which may be 
examined by external agents. Such memory may be examined by agents extemal to the network 
interconnecting the microcontrollers. 

Replicated components: no single point of failure 

A means is provided by which no single component failure renders the monitoring and 
control capability of the system inoperable. 

Extension by serial or modem gateway 

A means is provided allowing an extemal agent to communicate with the microcontrollers by 
extending the intercormecting network beyond the physical system. 
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The following provisional patent applications, commonly owned and filed on the same day as the 
present application, are related to the present application and are incorporated by reference: 


COMPUTER SYSTEM HARDWARE INFRASTRUCTURE FOR HOT PLUGGING MULTI- 
FUNCTION PCI CARDS WITH EMBEDDED BRIDGES (6391-704); invented by: 

Don Agneta 
Stephen E. J. Papa 
Michael Henderson 
Dennis H. Smith 
Carlton G. Amdahl 
Walter A. Wallach 


COMPUTER SYSTEM HARDWARE INFRASTRUCTURE FOR HOT PLUGGING SINGLE 
AND MULTI-FUNCTION PC CARDS WITHOUT EMBEDDED BRIDGES (6391-705); invented 
by: 

Don Agneta 
Stephen E.J. Papa 
Michael Henderson 
Dennis H. Smith 
Carlton G. Amdahl 
Walter A. Wallach 


ISOLATED INTERRUPT STRUCTURE FOR INPUT/OUTPUT ARCHITECTURE (6391-706); 
invented by: 

Dennis H. Smith 
Stephen E.J. Papa 


THREE BUS SERVER ARCHITECTURE WITH A LEGACY PCI BUS AND MIRRORED I/O 
PCI BUSES (6391-707); invented by: 

Dennis H. Smith 
Carlton G. Amdahl 
Don Agneta 
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HOT PLUG SOFTWARE ARCHITECTURE FOR OFF THE SHELF OPERATING SYSTEMS 
(6391-708); invented by: 


Walter A. Wallach 
Mehrdad Khalili 
Mallikarunan Mahalingam 
John Reed 


REMOTE SOFTWARE FOR MONITORING AND MANAGING ENVIRONMENTAL 
MANAGEMENT SYSTEM (6391-709); invented by: 

Ahmad Nouri 


REMOTE ACCESS AND CONTROL OF ENVIRONMENTAL MANAGEMENT SYSTEM 
(6391-710); invented by: 

Karl Johnson 
Tahir Sheik 


HIGH PERFORMANCE NETWORK SERVER SYSTEM MANAGEMENT INTERFACE 
(6391-711); invented by: 


Srikumar Chari 
Kenneth Bright 
Bruno Sartirana 


CLUSTERING OF COMPUTER SYSTEMS USING UNIFORM OBJECT NAMING AND 
DISTRIBUTED SOFTWARE FOR LOCATING OBJECTS (6391-712); invented by: 

Walter A. Wallach 
Bruce Findley 
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MEANS FOR ALLOWING TWO OR MORE NETWORK INTERFACE CONTROLLER CARDS 
TO APPEAR AS ONE CARD TO AN OPERATING SYSTEM (6391-713); invented by: 

Walter A. Wallach 
Mallikarunan Mahalingam 


HARWARE AND SOFTWARE ARCHITECTURE FOR INTER-CONNECTING AN 
ENVIRONMENTAL MANAGEMENT SYSTEM WITH A REMOTE INTERFACE 
(6391-714); invented by: 

BCarl Johnson 
Walter A. Wallach 
Dennis H. Smith 
Carl G. Amdahl 


SELF MANAGEMENT PROTOCOL FOR A FLY-BY-WIRE SERVICE PROCESSOR 
(6391-715); invented by: 

BCarl Johnson 
Walter A. Wallach 
Dennis H. Smith 
Carl G. Amdahl 
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Maestro Recovery Ma _,er 
Analysis - Problem Statement 


Problem Statement 

♦ Introduction 

Maestro Recovery Manager(MRM) is a software which locally or remotely manage a Raptor 
when a server is down or up, operating system died, LAN communication failed, or other 

server components failed . 

User will be able to manage the server in very simple, usable, and friendly GUI 
environment, MRM use modem for remote and serial commimication port for local to 
communicate with server fordiagnostic and recovery. 

Primary role of remote management is diagnosing and restoring service as quickly as 
possible in case of a service failure. 

System admmistrator, LAN administrator in customer shop and NetFrame Technical support 
will be primary user for the system. 

♦ Requirement Sources 

MRM requirements comes from the following 

1 - Focus Group (Customer Support and Training ) 

2 - User Walkthrough held by MRM team and Customer Support in Dec 96 

3 - Down System Management Road map (96) 

This road map is preliminary road map combmed with Up System Management 
road map. 

4 - MRM Road Map 97-98 

This Road Map presented to Engineering Council Meeting on Mar 10, 1997. 

5 - Raptor System, A Bird's Eye View. 

6 - Raptor Wire Service Architecture 

The followmg requirements have been identified for MRM 

♦ Support Remote Management for Diagnostic and 
Recovery 

Remote Management cover remote access to the Raptor Out Of Band 

management features. Remote Management will use Out of Band 
,Control Diagnostic and Monitor Subsystem (CDM) remote management to 
cover the other high value added remote management functions, primary role 
of remote management is diagnosing and restoring service as quickly as 
possible in case of service failure. 

, 1 . 
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♦ Support Remote Management (continue) 

The control of Raptor is completely "Fly By Wire" - i.e. no physical switch directly controls 

any function and no indicator is directly controlled by system hardware. All such functions 

referred to as "Out of Band " functions are controlled through a CDM. CDM basic functions 
are available so long as A/C power is available at the input to any of the power supplies. 

CDM Subsystem supervises or monitors the following system features. 

• Power supplies - Presence, status, A/C good, Power on/off and output voltage. 

• Environment - Ambient and exhaust temperatures. Fan speed, speed control, Fan 

fault and overtemp indicators. 

• Processor - CPU Presence, Power OK, Overtemp and Fault, NMI control. 

System reset. Memory type/ location and Bus/Core speed ratio, 

• I/O - I/O canister insertion/removal and status indicator , PCI card presence, PCI 

card power and smart I/O processor Out Of Band control. 

• Historical - Log of all events, Character mode screen image, and Serial number 

♦ Support for Object Oriented Graphic User Interface 

OO-GUI is graphic user interface with the following characteristic. 

• User task oriented 

It uses tasks which user familiar and daily working with. User does not need 
to learn the tasks. 

• User objects 

It uses objects which user working with during her or his daily work. 

• Simplicity and useabllty 

It is very simple to use and does not need long learning period. 

• Point and click with context sensitive help 

Context sensitive help and point and click will help user to be very 
productive and get any information he needs on specific object or field or 
subject 

• Drag and drop 

Drag and Drop capability works with user object very well to accomplish 
the tasks. 
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♦ Release Requirements (MRM V2.0, 4Q96) 


Maestro Recovery Manager (MRM )will support the following features locally through 
serial port and Wire Service Remote Interface card on the Raptorl6. 

MRM provide user friendly GUI with point and click capability to perform the 
following tasks which reviewed and accepted by the Focus Group for 4Q96 release. 


• Power On /Off 

MRM support Power On/Ofif the server. 

User can do this task by right mouse click on the server object in the screen and see 
the result. 

• Display Flight Recorder. 

While the server is working , Wire Service record all the server information 
m the 64K NVRAM. After the server failed, MRM will display the system log 
recorded in the NVRAM. User can evaluate the information and find the cause for 
the server failure. This can be done by right mouse click on the Flight Recorder 
object in the screen. 

• System Reset 

MRM support rebooting the server by right mouse click on the server object in 
the screen. This is warm reboot of the server and works as pushing the 
"reset" button on the server. 

• Save 

MRM will support saving Flight Recorder data, so user can send the file 
to the technical support for further diagnostic and recovery. It also can 
save the response for any Wire Service command failure. 

• On Line help 

MRM will support online help contains overview, Getting Started, MRM 
tasks, Diagnostic and Recovery, and BIOS help. 

• BO back plane support 

MRM will support the server with BO back plane . Server with BO 
back plane display wrong time stamp. MRM uses NetWare 4.1 1 
■ Operating system time stamp to display correct time stamp. 
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♦ Release Requirements (MRM V2.1, 1Q97) 

Maestro Recovery Manager (MRM) will support Raptorl6 Phase 2 for 
next release as follow. This release will delivered to customer by 
NetFrame Customer Support on CD. 

MRMV2.1 

MRM V 2.1 will support the MRM V2.0 plus the following new features for 
next release. 


• User Walkthrough Requirements held on Dec 17, 1996 

• Recovery and Diagnostic help. 

This help enable the user to display help based on message source or 
severity (fatal error, error, warning, ). In each case the help inform 
the user the cause for the error and what steps to take to solve the 
problem. 

• C0/E18 back plane support 

• New CO back plane Wire Service, Diagnostic, and BIOS message structure 
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♦ Release Requirements (MRM V2.2 , 2Q97) 
MRM V2.2 for Raptor 16 

MRM V2.2 will support MRM V2,l plus the following 
new features. 

• Remote connection via modem 

MRM supports remote connection to an NF9000-16 via an external modem. MRM 

needs one external modem for client side and one external modem for the server side. 

The client modem can be installed and set up via the Windows NT/95 standard control 

panel/Modems installation. The server side modem has to be set up and connected to 

the server. Details of installation and setup for the modem are provided in the 

NF9000 Maestro Recovery Manager Installation Guide. 
MRM does not support internal modems. 

The following external Hayes compatible modems have been tested and 
worked with MRM. 


* Client Modem 

US Robotics Sportster 33.6 Fax modem 
ZOOM fax MODEM V.34X 33,6 

* Server Modem 

ZOOM fax MODEM V.34X 33.6 


• System Status 

MRM supports retrieve and update of the system status components. 
System status comprised of the following components. 

* Power Supplies 

The following uiformation will be displayed for this feature. 

1. Presence 

2. Status(ACOK, DCOK) 

3. Power On/off 

4. Output voltage (Analog measure of main supply + VREF) 
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* Temperatures 

We will support four types of temperature for 5 sensors and 
display Operating (10-35 degree C) and None-operating 
(-40 to 70 degree C). 

1. Temperature of all sensors 

2. Warning temperature 

3 . Shutdown temperature 

4 . System over temp 

* Fans 

There are different type of fans in the system such as 
system fan and canister fan. All of them have the 
common following characteristics. 

5. Speed (speed data) 

6. Control (LOLIM, can be set to LOW or HIGH) 

7. Fault (LED, Bits) 

* Processors 

There are 4 CPU in the Raptorl6 with the followmg 
parameters. 

L CPU presence 

2. CPU Power OK 

3. System over temp 

4. System Fault 

If system over temp or CPU internal error or system power 
failure. 

then wire service report System Fault 

5. CPU Error 

If internal CPU error occurred , then report CPU error 

6. CPU NMI control 

7. System Board Bus/Core speed ratio 

* I/O Canisters 

There are four canisters available 

1. I/O canister (insertion, removal) 
This shows presence bits for canister. 

2. PCI cards 

This reflect PCI card slots [1-4] presence 

3. PCI card power 

This controls canister PCI slot power 
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* Serial Numbers 

This is the last known serial data for the following server parts ' 

1 . Back plane 

2. Canister 1-4 

3 . Remote Interface (not implemented) 

4. System Board 

5. Power supply 1-2 

* Revisions 

MRM will support the following chips revision 

1. Backplane 

2. System board 

3. Power Supply 1-2 

4. Canisters 1-4 

5. Local Interface 

6. Remote Interface 

• Context-sensitive Help 

All elements in the window such as icon, entry field, push button, and 
radio button have context-sensitive help. This help contains the following 
type. 

* What's this 

It shows description of each elements in the window which it is not 
disabled. This can be accomplished by right mouse click on each element 
in the window. 

* Help push button. 

This display general help for all windows, 

* FX Key 

The key displays the help for any entry field in the window. 

• Print 

MRM supports printing of flight recorder based on all messages, warning & 
errors, and errors with one type of font. 
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• Password 

Wire Service password is originally set by Manufacturing to "NETFRAME" (case 
sensitive) for every NF9000-16 server. 

MRM provides a password changing mechanism for the Wire Service system. 
For security purposes , MRM only allows the password to be changed via the 
local serial port connection and not via the remote connection 

• Support B0/E18 on NT4.0 server 

MRM supports B0/E18 configurations by utilizing a time stamp software 
component which resides on the NT4.0 server. 

Installation instructions for the tune stamp are provided in the NTReadMe file on 
a floppy disk packaged with MRM. 

MRM requires the NetFRAME NT Value Add software to operate. 
The NetFRAME NT Value Add software will automatically install the tune stamp 
for you. If you have not installed NetFRAME NT Value Add, then you need to 
mstall the time stamp provided for you on the NTSup floppy disk. 

• Support for InstallShield 

InstallShield setup software is used to install MRM on the client workstation. 

• Delivery 

MRM package contains the following. 

• NF9000 Maestro Recovery Manager CD release. 
This CD contains MRM software and documentation. 

• Two support floppy disks for NF9000-16 BO back plane for NT and NetWare. 

• Boxes contain above items , Remote Interface Card, adapter, cables, and 
documentation. 

• Dependency 

MRM version 2.2 depends on the followmg items: 

• Remote Interface chip provided by Wire Service(Firm Ware) department 

• . Remote Interface card provided by Hardware Engmeering department. 

• Remote Interface boxes, cables, and power adapters provided by Manufacturing. 


„ ^ _8 
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♦ Release Requirements (MRM V2.2, 2Q97) 
MRM V2.2 for Raptor 8 

MRM V2.2 for Raptor 8 has the same features as MRM v2.2 for Raptorl6 
with the following different . 

• Support for CO back plane and F18 BIOS 

• System Status 

The following components of System Status are different from MRM V2.2 
for Raptor 16. 

* Power Supplies 

1. User can not turn off and on specific power supply, 

2. Raptor 8 has three power supply. 

3. There are no DC (OK, BAD) for RaptorS. 

4. AC for all power supplies are good all the tunes. 


* Fans 


1. Four system board fans in front 

2. Two system board fans (Storage fans) in back 

3. Group A and group B sharing two fans. 

* I/O Groups 

1. Group A contains 4 PCI card slots 

2. Group B contains 4 PCI card slots. 

* Serial Numbers 

1. Serial number for Group A and B fans are the same. 

2. There is serial number for power supply # 3. 

* Revisions 

1. Group A and B fans have the same revision. 

2. There is revision for power supply #3 
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• Delivery 


MRM package contains the following. 


* NF9000 Maestro Recovery Manager CD release. 
This CD contains MRM software and documentation. 

* Boxes contain above items , Remote Interface Card, adapter, cables, and 
documentation. 
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Overview: 


This board is an interface between Raptor Wire Services and an external modem. The 
system status and commands are passed through the RS232 connection at the modem 
side to the Wire Services bus, the I2C bus, controlled through an on board PIC16C65. 
The 12C signals are translated by the PIC16C65 into an eight signal RS232 protocol and 
passed through a voltage level translator LT1 133A, with baud capable of reaching the 
speed of 120k. A 25 pin D-Sub connector resides on the other side of the voltage level 
translator 

The system status storage is through a 32Kx8 SRAM, with an external lath for latching 
the higher addressing bits of the data RAM. A signal powered EPROM is used for 
storing board ID information. 

The board is powered through 7.5V and 700mA supply unit, and is an alternative source 
for the bias powered partition of the Wire Services. The bias powered block includes an 
NV-RAM and a PIC16C65 which are resident on the Raptor back plane. The power 
source is regulated through a high frequency switching regulator. 


1.0 Features 

The designed features are as follows: 

1.1 I2C Interface 

The two wires interface is brought from the Raptor and passed to the PIC16C65 using 
an RJ45. A bus extender 82B715 is connected between the external interface to the 
local I2C bus. Port C bit 3 is the clocking bit, and Port C bit 4 is the data line. 


1.2 RS232 Protocol 

The communication with the modem is based on the RS232. Microcontroller PIC16C65 
is used to generate the receive and the transmit signals, where the signal levels are 
transposed to the RS232 levels by the LT1133A. The 3 transmit signals, RTS, SOUT 
and DTR are from Port A bits 2. 3 and 4, where as the 5 receive signals are from two 
ports, DCD, DSR from Port C 1 ,0 and SIN, CTS and Rl from Port A 5, 0, 1 . 

The 25 pin RS232 pin connection is used instead a 9 pin connector, since this type of 
connector is more common than the other. All the extra pins are no connect except the 
pins 1 and 7, where pin 1 is chassis ground and pin 7 is a signal ground. 
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The connection through LT1133A can be mn up to 120k Baud and is ESD protected to 
+/-lOkV. 

The short voltage at the output can be +/- 30V and is isolated to the forward direction 
only. 


1.3 PIC16C65 and 32Kx8 

A 32Kx8 SRAM is available for storage and transfer between the internal Wire Services 
and the external remote interface. Port D is the address port, while an external 
74ABT374 is for expanding the address range to 15 bits. Port B is the data bus for the 
bi-directional data interconnect. Port E is for the SRAM enable, output tristate and the 
write control signals. 

The PIC16C65 is designed for a frequency of 12MH2. An LED is also connected to the 
Port C bit 5. 




DS2502 


Transceiver 


C3,C4 

A&C 


B,E 

C6 

D 


RS232 
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A. 


Figure 1 : Remote interface interconnect 
1.4 Serial ID EPROM 

DS2502 is for storing board ID, connected to PIC16C65 Port C bit 6. The programming 
is handled through a jumper applied through connector J1. DS2502 is a signal powered, 
retaining the charge into a capacitor, sourced through the data line. 


2.1 Alternative Power Source 

The board is powered through 7.5V and 700mA (or 800mA which ever available) supply 
unit. After regulating the supply, it is an alternative source for the bias powered partition 
of the Raptor Wire Services, The bias powered block includes an NV-RAM and a 
PIC16C65 which are resident on the Raptor back plane. 

The power source is regulated through a high frequency switching regulator based on 
Linear Technology LT1376. The input to the regulator circuitry is off a wall mounted 
adapter. The regulated output is consumed locally and 300mA are sourced to the 
Raptor Wire Services through a fuse and an RJ45 P1 . 


2.2 Power Consumption 

The following is an average estimated power consumption with the board running at a 
base frequency of 12MH2. 


PIC16C65 

Microcontroller 

30mA 

82B715 

I2C Extender 

10mA 

32Kx8 

SRAM 

80mA 

LT1133A 

Transceiver 

70mA 

374 

Latch 

30mA 


Misc. 

60mA 


280mA 

Alt. Source 300mA 
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LT1376, L1,D2. D3, etc. 


580mA 

1 .45 Watts max. 



• 1 .-47 • 


.74 


[C2a] 


O 


g§liJBira: 


1.49 


-2.95- 


^ 362 MAX COMPONENT HEIGHT 
-.272 


.272 

.062 THK 


Figure 2: Mechanical Orientation 


2.3 Board Layout 

The board is based on controlled impedance of 60 Ohms +/- 10%, with 6 layers and test 
points for all signals. The width is restricted by the dimension of the RS232 due to the 
mounting constrains. The board is dual sided with active components kept on the top 
side only. 

The high frequency bypass is kept with .luf and .001uf, where the charge storage is 
kept by two 33uf and two 1 uf capacitors. 

The location and mounting of the power connector and the LED are kept such that the 
both sides of the cabinet are identical, therefore interchangeable. 
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3: Enclosure 

The enclosure is planned to be Injection Molded Aluminum, a side view is in figure 3. 
Aluminum instead of plastic is selected due to the regulator heat, and EMI shielding. 

The board connects at three locations between the top and the bottom enclosures. Two 
locations are based on the clamp shell design at the D-Sub and the RJ45, two opposite 
ends of the enclosure. The third location is a mounting hole in the center of the 
enclosure. 


8 


Figure 3: Board and Enclosure isometric View 
4.0 Environment 

The environmental specification is based on assumptions: 

The environment is Ground Fixed. 
The "Quality Level of II" is used. 

Bellcore Method I, Parts Count Method, Case 2 for prediction. 
Burn-in time 120 hours. 

Operated at 40C and 50% rated electrical stress. 
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Environmental Specification: 


MEAN TIME BETWEEN FAILURE 

2.4452500-^06 Hours 

This number is calculated based on the Bellcore Technical Reference 
TR-NWT-000332, Reliability Prediction Procedure for Electronic 
Equipment, Issue 4, September 1992. 


ALTITUDE 

Operating -1 00 to 1 0,000 feet 
Non-Operating -100 to 40,000 feet 


HUMIDITY 

Operating 10% to 80% R.H., Maximum Gradient 10% per hour 

Non-Operating 5% to 90% R.H., Maximum Gradient 10% per hour 


TEMPERATURE (ambient) 

Operating 10 to 40 degrees C Maximum 
Gradient 10 degrees C per hour 

Non-Operating -40 to 70 degrees C 

Maximum Gradient 10 degrees C per hour 


SHOCK 

Operating 

Magnitude 2 G's (peak) 
Duration 1 1 ms 
Waveform Half Sine 

Non-Operating 

Magnitude lO.G's(peak) 
Duration 1 1 ms 
Waveform Half Sine 


VIBRATION 

Operating 

Frequency Range 

Magnitude 

Acceleration 

Non-Operating 

Frequency Range 

Magnitude 

Acceleration 


5 to 500 Hz 

0.01 0 inch peak to peak displacement 
0.20 GOs peak 


5 to 500 Hz 

0.010 inch peak to peak displacement 
0.50 G6s peak 
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DROP (PACKAGED) 

ASTM D4169 


ELECTRICAL 

Nominal Line 


1 1 5 VAC or 230 VAC @ 50/60 Hz autoranging 


Line Deviation 


90-130 VAC & 180-256 VAC @ 47-63 Hz 


Line Transient/Surge Susceptibility 


1.25 X highest rated nominal 
voltage or 300 Vrms, 
whichever is less, for 1 second. 


ELECTRO-MAGNETIC COMPATIBILITY 

FCC, Class A under FCC Rule 15, Subpart B, conducted and radiated. 

Canadian Radio Interference Regulations, C.R.C., c.1374, Sec. 2, as 
amended in The Canadian Gazette, Part II, Vol. 122, No. 20, dated Sept. 
28, 1988. 

European EMC Directive (89/336/EEC) CISPR 22 (Class B). 
lEC 801-2:1984 8 kV air discharge 
lEC 801-3:1984 3 V/m, 27-500 MHz 
lEC 801-4:1988 1 kV mains, 500 V other. 


SAFETY AGENCIES 

UL, CSA, VDE, JIS 


Electrostatic Discharge 

Air Discharge 2.5 to 5.0KV no errors allowed 

5.1 to 10.0 KVrecoverable errors through system allowed 
10.0 to 20.0KV recoverable errors through 

power cycling allowed 

Contapt Discharge 0 to8.0KV recoverable enters through 


power cycling allowed 
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